VirusLocker

Description: Rogue Security Program
Risk Level: High
Date of First Occurence: Monday, April 28, 2008
Software Developer: (unknown)
Brief Info: Rogue/Suspect Anti-Spyware Product "Rogue/Suspect" means that these products are of unknown, questionable, or dubious value as anti-spyware protection.
Removal: This threat can be removed using "Spyware Terminator"

ENTFERNEN SPYWARE »

Geographical Distribution of Threat "VirusLocker"

Threat Info

View All

Detected Items

  1. Detected Files: %PROGRAMFILES%\VirusLocker\VirusLocker.exe MD5: 147737A757BEC2303561627CA27BEB4F Size:1548288 MD5: F55B56388827BC12136B48D7569DA66F Size:1548288 MD5: 618685F4515C7CD272A76B1A8D66C528 Size:1544192 MD5: 4F9425C2E8A50BFEC467A2CAB91015C3 Size:1544192 MD5: 441A6BDA36104311F39BAC103A9CFFB7 Size:1544192 %PROGRAMFILES%\VirusLocker\uninst.exe MD5: 5932E67D9E281370D343510A372327C9 Size:41178 MD5: AEECF369879E622BA971B4FF069AB3B1 Size:41507 MD5: F7AC979CD6B981B43F9C29A1107A366B Size:41178
  2. Detected Files with variable Filenames: MD5: F55B56388827BC12136B48D7569DA66F Size: 1548288 %PROGRAMFILES%\VirusLocker\VirusLocker.exe %PROGRAMFILES%\VirusLocker\viruslocker.exe.ren MD5: 86F1895AE8C5E8B17D99ECE768A70732 Size: 348160 %PROGRAMFILES%\VirusLocker\msvcr71.dll %PROGRAMFILES%\VirusLocker\msvcr71.dll.ren MD5: 561FA2ABB31DFA8FAB762145F81667C2 Size: 499712 %PROGRAMFILES%\VirusLocker\msvcp71.dll %PROGRAMFILES%\VirusLocker\msvcp71.dll.ren

Detecting items list:

  1. Files by Name %APPDATA%\Microsoft\Internet Explorer\Quick Launch\VirusLocker ?.*.lnk %DESKTOP%\VirusLocker.lnk %START_PROGRAMS%\VirusLocker\Uninstall VirusLocker ?.*.lnk %START_PROGRAMS%\VirusLocker\VirusLocker ?.? Website.lnk %START_PROGRAMS%\VirusLocker\VirusLocker ?.*.lnk %START_MENU%\VirusLocker ?.*.lnk %ProgramFiles%\VirusLocker\Lang\English.ini %ProgramFiles%\VirusLocker\uninst.exe %ProgramFiles%\VirusLocker\VirusLocker.exe %ProgramFiles%\VirusLocker\VirusLocker.url %ProgramFiles%\VirusLocker\vl.dat
  2. Files by Directories %ProgramFiles%\VirusLocker %START_PROGRAMS%\VirusLocker
  3. Registry Keys HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\VirusLocker.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusLocker HKLM\SOFTWARE\VirusLocker
  4. Registry Values HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=VirusLocker

« Go to Software Database